diff --git a/.github/actions/vmtest/action.yml b/.github/actions/vmtest/action.yml
index 8c804c3..fa607c4 100644
--- a/.github/actions/vmtest/action.yml
+++ b/.github/actions/vmtest/action.yml
@@ -16,6 +16,22 @@ inputs:
 runs:
   using: "composite"
   steps:
+    # Allow CI user to access /dev/kvm (via qemu) w/o group change/relogin
+    # by changing permissions set by udev.
+    - name: Set /dev/kvm permissions
+      shell: bash
+      run: |
+        if [ -e /dev/kvm ]; then
+          echo "/dev/kvm exists"
+          if [ $(id -u) != 0 ]; then
+            echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' \
+              | sudo tee /etc/udev/rules.d/99-kvm4all.rules > /dev/null
+            sudo udevadm control --reload-rules
+            sudo udevadm trigger --name-match=kvm
+          fi
+        else
+          echo "/dev/kvm does not exist"
+        fi
     # setup environment
     - name: Setup environment
       uses: libbpf/ci/setup-build-env@main
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3ce52a1..1e7224c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -31,22 +31,6 @@ jobs:
             runs_on: s390x
             arch: 's390x'
     steps:
-      # Allow CI user to access /dev/kvm (via qemu) w/o group change/relogin
-      # by changing permissions set by udev.
-      - name: Set /dev/kvm permissions
-        shell: bash
-        run: |
-          if [ -e /dev/kvm ]; then
-            echo "/dev/kvm exists"
-            if [ $(id -u) != 0 ]; then
-              echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' \
-                | sudo tee /etc/udev/rules.d/99-kvm4all.rules > /dev/null
-              sudo udevadm control --reload-rules
-              sudo udevadm trigger --name-match=kvm
-            fi
-          else
-            echo "/dev/kvm does not exist"
-          fi
       - uses: actions/checkout@v3
         name: Checkout
       - uses: ./.github/actions/setup